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1,  INTRODUCTION 


A  physical  dynamical  system  is  a  real-world  construct  that  is  constantly  changing  or  varying  in  terms 
of  its  descriptive  parameters,  such  as  position,  velocity,  field  strength,  and  so  on.  There  are  three  principal 
paradigms  associated  with  a  dynamical  system:  (1)  a  space,  known  as  the  manifold,  in  which  the  motion 
or  activity  of  the  system  takes  place,  (2)  a  rule  (or  set  of  rules),  known  as  the  vector  field  (or  vector 
fields),  to  determine  the  progression  of  the  system  in  space  and  time,  and  (3)  the  state  of  the  system, 
which  is  the  set  of  numerical  values  of  all  the  system’s  descriptive  parameters  sampled  at  an  instant  of 
time  t.  What  distinguishes  a  dynamical  system  fiom  a  static  system  is  the  former’s  evolution  as  a  function 
of  time.  If  a  is  a  vector  whose  elements  describe  the  state  of  a  system  as  a  function  of  time,  then  the  time 
derivative  of  the  vector  do/dt  =  0  for  a  static  system  and  do/dt  >  0  for  a  dynamical  system.  The  vector 
field  for  a  system  may  also  be  time-dependent,  so  that  a  system  may  jump  from  a  static  to  a  dynamic 
conditimi  (or  vise-versa)  as  a  function  of  time. 

All  real-world  military  systems  active  within  a  battlefield  can  be  considered  dynamical  systems.  The 
battlefield,  which  is  the  system’s  manifold,  is,  by  its  very  nature,  an  area  of  constant  change  and  activity. 
The  vector  fields,  which  determine  the  progressive  states  of  the  military  system  as  a  function  of  time,  are 
themselves  functions  not  only  of  system  parameters  but  also  of  external  battlefield-environment 
parameters,  such  as  terrain,  atmospheric  conditions,  and  potential  threats  to  the  system.  To  address  the 
last  area  mentioned  in  the  previous  statement,  a  process  structure,  or  Vulnerability/Lethality  (V/L) 
Taxonomy,  has  been  developed  for  the  V/L  analysis  of  military  systems  exposed  to  battlefield  threats 
(Deitz  1986;  Deitz  and  Ozolins  1989;  Deitz  et  al.  1990;  Klopcic,  Starks,  and  Walbert  1992).  This  V/L 
Taxonomy,  which  is  really  a  mathematical  framework  for  V/L  analysis  developed  by  the  Ballistic 
Vulnerability  Lethality  Division  (BVLD)*  of  the  Survivability  Lethality  Analysis  Directorate  (SLAD), 
U.S.  Army  Research  Laboratory  (ARL),  clearly  defines  the  elements  of  the  V/L  analysis  process  as: 
(1)  generation/formation  of  the  threat  event,  (2)  interaction  between  the  threat  and  the  target  system, 
(3)  component  response  within  the  system,  and  (4)  final  remaining  system  capability  levels.  The  V/L 
Taxonomy  will  be  addressed  in  further  detail  in  the  next  section. 

The  SLAD  of  ARL  has  the  responsibility  of  evaluating  the  survivability,  lethality,  and  vulnerability 
(SLV)  of  U.S.  Army  systems  against  the  full  spectrum  of  battlefield  threats,  including  conventional 
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BVLD  was  formo-ly  known  as  the  Vulnerability  Lethality  Division  of  the  U.S.  Army  Ballistic  Research  Laboratory  (BRL). 


1 


ballistic,  electronic  warfare  (EW),  nuclear,  chemical,  biological,  smoke/obscurants,  and  atmospheric.  The 
three  divisions  within  SLAD  (BVLD,  Electronic  Warfare  Division  [EWD],  and  Chemical/Biological, 
Nuclear,  and  Environmental  Effects  Division  [CBNED])  are  tasked  with  applying  their  capabilities  to 
perform  SLV  simulations,  investigations,  and  analyses  to  support  program  managers  (PMs),  independent 
evaluators,  and  decision  makers.  In  order  to  better  implement  these  capabilities,  the  V/L  Taxonomy  has 
been  ^plied  to  all  battlefield  threats  within  the  spectrum  of  SLAD’s  responsibilities  to  generate  threat- 
specific  V/L  process  structures  (Deitz  1986;  Deitz  and  Ozolins  1989;  Deitz  et  al.  1990;  Klopcic,  Starks, 
and  Walbert  1992;  Ruth  1994;  Walbert  1994;  Mar  1995;  zum  Brunnen  1995).  Although  a  recent  effort 
has  applied  the  V/L  Taxonomy  to  address  the  battlefield  combined  arms  threat  (Hughes  1995),  the 
challenge  still  remains  of  integrating  these  process  structures  into  a  composite  architecture  with  the 
capability  to  treat  time  as  a  stochastic  variable. 

The  objective  of  this  report  is  to  present  a  variation  on  the  established  V/L  Taxonomy  that  could  be 
used  as  an  architecture  for  the  integrated  SLV  analysis  of  a  military  system  exposed  to  the  full  spectrum 
of  battlefield  threats,  where  the  threats  can  be  applied  stochastically  as  a  function  of  time.  This 
methodology  basically  involves  the  introduction  of  a  time  axis  orthogonal  to  the  process  flow  within  the 
current  V/L  process  structure.  The  overall  architecture  of  the  new  structure  is  first  presented;  then,  each 
element  within  the  architecture  is  examined  in  greater  detail.  Finally,  an  example  ai^lication  using  the 
new  structure  to  analyze  a  battlefield  system  is  described. 

2.  BACKGROUND 

The  V/L  Taxonomy  is  a  mathematical  framework  developed  by  BVLD,  which  clearly  defines  the 
elements  of  the  V/L  analysis  process  (Deitz  1986;  Deitz  and  Ozolins  1989;  Deitz  et  al.  1990;  Klopcic, 
Starks,  and  Walbert  1992).  Within  this  framework,  two  critical  concepts  are  defined: 

•  Vulnerability  Space  or  Level.  A  vulnerability  space  or  vulnerability  level  (VL)  is  defined  as  a  set 
of  points,  where  each  point  is  a  vector  whose  elements  each  define  the  status  of  a  particular  aspect 
of  the  system  under  analysis  (SUA)  or  subsystem  under  analysis  (SSUA).  The  number  of  points  in 
a  particular  level  is  a  function  of  the  analytical  granularity  imposed  on  the  SUA.  There  are  five 
separate  levels  in  the  Taxonomy:  (1)  VLO,  the  set  of  all  possible  vectors  describing  threat 
configurations  for  threat  definition;  (2)  VLl,  the  set  of  all  possible  vectors  defining  initial  conditions, 
consisting  of  the  vector  elements  threat  definition  and  target  dtfinition  for  each  point  in  the  space; 
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(3)  VL2,  the  set  of  all  possible  vectors  defining  damaged  components;  (4)  VL3,  the  set  of  aU 
possible  vectors  defining  a  new  system  (a  degradation  of  the  original  SUA);  and  (5)  VL4,  which  is 
the  set  of  all  possible  vectors  defining  the  overall  post-threat  battlefield  utility  of  the  SUA. 

•  Mapping.  A  mapping  is  a  function  that  operates  on  a  point  (state  vector)  in  one  level  to  generate 
a  time-evolved  image  point  in  the  next  level.  The  mapping  function  itself  is  an  algorithm  (or  set 
of  algorithms)  that  incorporates  the  physics  or  engineering  of  a  real-time  and  real-space  process 
(such  as  electromagnetic  pulse  [EMP]  coupling  into  a  cable  or  chemical  agent  penetration  into  an 
enclosure).  The  mapping  operator  is  defined  as  the  noninvertible  function  that  maps  a  point 
in  VL^  to  an  image  point  or  locus  of  points  in  VL„^.j. 

Figure  1  illustrates  the  generic  V/L  Taxonomy. 

The  V/L  Taxonomy  is  a  finameworic  for  understanding  the  steps  involved  in  evaluating  the  effect  of 
a  threat  on  a  target  asset.  The  primary  purpose  of  the  Taxonomy  is  not  so  much  to  impose  a  methodology 
for  developing  V/L  simulations,  but  to  provide  a  common  language  in  which  to  discuss  the  {Mocesses 
involved  in  performing  these  simulations.  In  so  doing,  it  has  also  helped  to  clarify  the  significance  of 
various  issues  in  vulnerability. 

The  concept  of  a  vulnerability  level,  as  described  previously,  is  such  that  at  each  level,  the  state  of 
the  threat/target  combination  can  be  described  by  a  set  of  values  that  are  measurable  and  meaningful.  It 
has  been  shown  that  mathematical  spaces  can  be  defined  at  each  level  (Walbert  1994).  The  structure 
requires  mapping  functions  to  determine  the  values  in  one  level  from  the  values  in  the  previous  level. 
These  mapping  functions  are  the  heart  of  the  vulnerability  analysis.  They  determine  the  outcome  of  the 
analysis  and  must  be  continually  refined  to  provide  the  highest  quality  models  possible. 

Now,  we  will  describe  the  individual  elements  of  the  V/L  Taxonomy  in  greater  detail.  VLO  describes 
the  conditions  of  initial  threat  generation.  This  includes  information  such  as  the  initial  launch  conditions 
of  a  tactical  missile,  the  detonation  of  a  theimonuclear  device,  or  the  initial  generation  of  a  radio  frequency 
(RF)  jamming  signal.  The  initial  mapping  process  within  the  V/L  Taxonomy  is  the  Oq  j  mapping,  which 
describes  the  evolution  of  the  threat  from  its  initial  generation  in  VLO  to  the  point  of  its  first  moment  of 
interaction  with  a  ta];get  system. 
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VLO 


Oo  1  Mapping 
VLl 


Oi  2  Mapping 
VL2 


O2  3  Mapping 
VL3 


O3  4  Mapping 
VL4 


Figure  1.  The  V/L  Taxonomy. 


VLl  describes  the  initial  threatAarget  system  encounter  conditions.  The  location  and  motion  of  both 
target  and  threat,  plus  other  relevant  physical  parameters  are  important  constituents  of  VLl  metrics.  For 
an  air  defense  problem,  this  would  be  the  motion  of  the  aircraft,  the  trajectory  of  the  munition,  as  well 
as  the  payload  on  the  mimition  (high  explosive,  fragments,  incendiary,  etc.).  For  an  EW  threat,  the  target 
may  be  in  the  same  location  performing  the  same  maneuvers,  but  the  information  required  (material 
properties,  electronic  equipment  on  board)  will  be  different,  and  the  nature  of  the  threat  and  the  models 
required  to  compute  VL2  metrics  will  be  completely  different 

The  collection  of  equations/decisions  required  to  determine  the  VL2  metrics  from  the  encounter 
conditions  form  the  2  mapping.  As  previously  mentioned,  VL2  refers  to  the  damage  to  the  individual 
components  within  the  target.  A  component  is  an  item  which  performs  a  particular  function  within  the 
overall  system  and  which  may  be  considered  to  fail  or  degrade  as  a  unit.  The  numerical  value  associated 
with  a  component  for  VL2  measures  is  usually  a  number  between  0.0  and  1.0  inclusive  (these  numbers 
are  currently  restricted  to  0  or  1,  indicating  complete  nonfunctionality  or  complete  functionality, 
respectively).  This  number  is  either  a  value  indicating  partial  functionality  of  the  component,  or  a 
complementary  value  indicating  loss  of  functionality  within  the  same  component.  This  flexibility  of 
definitions  requires  clear  communication  from  the  model  developer  to  the  analyst  to  explain  precisely  what 
the  values  mean  and  how  they  are  to  be  used. 

It  must  be  understood  that  the  definition  of  "component"  is  rather  flexible.  It  simply  refers  to  the 
lowest  level  of  detail;  in  other  words,  a  component  is  the  smallest  thing  that  the  analyst  will  consider  as 
a  single  unit  Thus,  to  one  analyst,  an  engine  might  be  a  component,  while  to  another,  the  caihuretor, 
distributor,  cylinders,  and  water  pump  might  be  separate  components.  The  level  of  detail  in  the  physical 
definition  of  a  component  is  referred  to  as  the  "granularity."  The  granularity  required  for  an  analysis  is 
dictated  by  the  type  of  questions  being  asked  and  the  time  available  to  prepare  the  inputs. 

VL3  refers  to  the  remaining  capabilities  of  the  target  system  as  a  whole.  That  is,  what  is  the  system 
capable  of  doing  after  the  encounter  with  the  threat?  This  is  the  level  with  which  the  soldier  in  the  field 
usually  interacts.  When  his  tank,  helicopter,  or  unit  is  hit,  die  first  thing  the  soldier  knows  (if  he  survives 
the  initial  impact)  is  that  it  will  no  longer  do  certain  things  that  it  used  to.  VL3  values  are  usually 
determined  from  VL2  functionality  values  by  means  of  capability  or  fault  trees,  which  will  be  explained 
later  in  this  report.  This  is  referred  to  as  the  023  mapping. 
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VL4  is  the  battlefield  utility  of  the  target  after  it  has  been  impacted  (and  possibly  modified)  by  the 
threat.  Traditionally,  this  was  expressed  as  a  list  of  "kill  values"  for  various  types  or  levels  of  damage 
to  the  target  For  aircraft  this  meant  values  for  attrition  (loss  of  the  aircraft  and  crew),  forced  landing, 
and  mission  abort.  For  ground  vehicles,  this  usually  meant  values  for  firepower,  mobility,  and  catastrophic 
kiU.  However,  since  the  advent  of  the  capability  metrics,  it  has  become  clear  that  these  values  are 
inadequate  for  expressing  the  response  of  the  damaged  target  to  the  total  battlefield  environment  A 
damaged  target  that  is  considered  useless  in  one  scenario  may  be  quite  useful  in  a  different  scenario, 
depending  on  the  capabilities  required  for  that  scenario. 

One  limitation  with  the  VfL  Taxonomy  is  the  representation  of  time  within  the  process  structure.  A 
specific  time  is  assigned  to  all  points  within  a  vulnerability  level;  this  representation  limits  the  ability  to 
overlap  or  embed  dynamical  multithreat/target  interactions.  The  current  V/L  stmcture  requires  that  each 
threat-specific  V/L  analytical  process  (which,  when  properly  coupled  together,  would  fonn  an  integrated 
analysis)  involving  a  target  system  be  executed  in  series  or  in  sequence.  This  sequential  structure  limits 
the  flexibility  of  dynamically  combining  threats;  in  a  real  battlefield,  many  threat-specific  V/L  processes 
run  parallel  (rather  than  serial)  as  a  function  of  increasing  time,  which  is  difficult  to  convey  within  the 
existing  process  structure.  What  is  required  is  an  architecture  that  cleariy  delineates  the  flow  of  forward 
time  (either  linear  or  nonlinear)  within  a  V/L  process  structure  and  also  provides  flexibility  for 
dynamically  combining  multithreat  effects  on  a  target  system. 

3.  TIME-DISCRETE  V/L  PROCESS  STRUCTURE 

3.1  Model  Architecture.  In  the  real  battlefield,  dynamical  V/L  processes  are  continuous.  For 
analytical  purposes,  the  continuum  that  contains  all  V/L  process  vectors  can  be  discretized  into  a  set  of 
time-sampled  states,  where  tlw  total  number  of  time  samplings  is  finite.  In  this  approach,  the 
discretization  of  continuous  time  into  a  set  of  intervals  (which  may  be  either  homogeneous  or  variable) 
is  driven  by  two  factors:  (1)  the  relative  time  scales  of  the  system  dynamics,  including  both  the 
threal/target  system  interaction  physics  and  the  post-interaction  subsystem  component  response,  and  (2)  the 
analytical  granularity  that  a  threat-specific  model  imposes  upon  the  system  dynamics.  The  number  of 
possible  states  that  might  occur  at  any  sample  time  is  countably  infinite  and  is  a  function  of  both  the  "V/L 
process  time"  and  the  computational  complexity  of  the  dynamical  V/L  processes. 
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As  previously  described  in  this  report,  the  state  of  a  dynamical  system  at  a  given  instant  can  be 
envisioned  as  a  "snapshot"  in  time,  fully  describing  the  system  dynamics  (in  terms  of  descriptive 
parameters)  at  the  sample  time.  Within  a  dynamic  V/L  process,  the  state  of  the  system,  sampled  at  time 
r„,  can  be  decomposed  into  four  substates;  within  each  of  these  substates  is  a  supervector,  or  set  of  state 
vectors.  Each  substate  is  deflned  to  contain  exactly  one  supervector,  where 

•  the  Threat  substate  contains  the  supervector  [T(/„)], 

•  the  Target  System  substate  contains  the  supervector  [S(t^], 

•  the  Component  Functionality  substate  contains  the  supervector  [F(r„)],  and 

•  the  System  Capability  substate  contains  the  supervector  [C(r„)]. 

The  notation  [V(r^)]  implies  that  V  is  a  supervector  within  a  substate  sampled  at  time  t^.  Each  of  these 
supervectors  contain  information  concerning  the  state  of  the  threat,  target  system,  component  functionality 
levels,  and  system  capability  levels  required  by  a  V/L  analyst  for  a  system  analysis.  The  threat,  target 
system,  component  functionality,  and  system  capability  substates  roughly  correspond  to  VLO,  VLl,  VL2, 
and  VL3  within  the  V/L  Taxonomy,  respectively  (the  correspondence  is  only  approximate,  since  VLO  and 
VLl  are  each  constrained  to  one  instant  in  time,  namely  the  threat  event  initialization  and  the  threat/target 
interaction  initialization,  respectively).  Figure  2  shows  an  example  of  a  V/L  process  supervector  ([T(/),)] 
for  a  nuclear  EMP  event). 

Within  the  state  sampled  at  time  r„,  one  can  define  mappings  between  substates  that  operate  in  a 
manner  similar  to  the  inter- VL  mappings  within  the  V/L  Taxonomy.  From  the  threat  event  initial  time 
tQ  to  die  first  instant  of  threat/target  system  interaction  r,-,  only  the  threat  supervector  [T(r„)]  dynamically 
evolves;  however,  a  complete  description  of  the  target  system  exists  within  the  supervector  [S(r„)]  from 
time  tQ  onward.  Commencing  at  time  [T(r„)]  and  [S(r„)]  begin  to  interleaf,  which  is  actually  a  coupling 
of  state  vectors  in  [T(r„)]  to  other  state  vectors  in  [S(r„)]  and  is  represented  by  the  coupling  mapping  Oj>+s. 
This  operation  is  a  static  information  mapping  rather  than  a  dynamic  coupling,  where  threat  state  vectors 
are  added  to  specific  portions  of  the  target  description.  The  information  in  [S(r„)]  is  updated  at  every 
sample  time  (which  is  the  time-dependent  state  of  the  target  system)  and  then  evaluated,  resulting  in  the 
component  functionality  supervector  [F(r^)],  which  includes  functionality  state  vectors,  each  of  which 
contains  both  a  metric  for  determining  the  function  of  a  specific  component  and  a  fimctionality  level 
chosen  from  the  inclusive  interval  [0,  1]  pertaining  to  that  component.  This  evaluation  process  is 
essentially  a  mapping  of  physical  system  information  to  functional  component  information,  and  is 
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Figure  2.  Example  of  the  threat  supervector  fT^)1  for  a  nuclear  BMP  event. 


represented  by  the  functional  mapping  O5  p.  This  information  can  further  be  combined  via  a  capability 
treeMetwoik  mapping  to  produce  system  capability  levels  associated  with  each  sample  time  (which  are 
represented  by  capability  state  vectors  that  populate  [C(r„)]);  this  mapping  of  component  functional 
information  to  system-level  capability  information  is  represented  by  the  capability  treeMetwoik  mapping 
Op.c- 

Once  the  structure  of  operational  mappings  within  a  V/L  process  state  sampled  at  time  is 
established,  an  operator  must  be  defined,  which  maps  this  state  to  a  proceeding  state  sampled  at  time  ^n+I' 
This  operator  executes  a  mapping  of  the  form 


where 


[M(<„^y)]  =  meta-vector  at  time 

F(Ar„^^.;)  =  transition  matrix  operating  on  [M(t„)] 

[M(t^)]  =  meta-vector  at  time  t„,  composed  of  the  supervector  set  {[T(r„)],  [S(t„)],  [F(r„)],  and 

[C(g]}. 

=  stochastic  "noise"  vector  representing  possible  random  processes  within  the  time 
interval  [t„, 


The  dynamic  meta-vector  [M],  which  is  the  set  of  all  meta-vectors  [M(r„)]  sampled  over  the  entire  "W/L 
process"  time  window,  is  actually  aU  of  the  information  which  the  V/L  analyst  requires  to  cany  out  a 
complete  system  analysis.  The  transition  matrix  F(A/^^^y)  operates  on  the  existing  state  at  to  detennine 
a  portion  of  [M(t„^y)]  (the  remainder  of  [M(r„^y)]  being  determined  by  stochastic  processes  which  may 
be  embedded  within  the  interval  [t„,  t;,+y]);  if  [C(M„  „^y)]  is  of  zero  amplitude,  then  the  above  time- 
moping  can  be  considered  a  Maikovian  process,  in  the  sense  that  the  state  of  the  system  at  is 
dependent  only  on  its  state  at  (this  assumes  that  threat  events  occur  randomly  with  no  a  priori 
knowledge  of  their  definite  occurrence  in  space  and  time). 
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Now  that  both  the  operational  mappings  within  a  V/L  process  state  and  an  inter-state  time-mapping 
operator  have  been  defined,  the  two  can  be  combined  in  a  V/L  process  architecture.  Rgure  3  illustrates 
this  architecture.  Note  that  the  operational  mappings  between  substates  occur  along  an  axis  orthogonal 
to  the  horizontal  time  axis.  The  dynamic  continuum  representing  the  "V/L  process"  time  is  discretized 
into  m  intervals,  where  the  «th  interval  is  of  length  -  t^.  At  the  left  of  the  figure,  the  threat 

event  initial  time  is  characterized  by  tg,  at  time  f,-,  [T(/„)]  and  the  target  system  supervector  [S(r^)]  begin 
to  interact  At  time  the  information  within  [T(t„)]  and  [S(r„)]  becomes  "inter-leafed,"  so  that,  as  time 
evolves,  the  state  vectors  within  [T(/„)]  perturb  the  state  vectors  within  [S(/„)]  and  vice-versa.  These 
perturbations  may  result  in  component  damage  or  malfimction,  which  would,  in  turn,  modify  [F(r„)]  and 
[C(r^)]  as  a  function  of  time. 

3.2  The  Threat  and  Target  System  Supervectors  FTfr^ll  and  and  the  Threat/Target  System 
Coupling  Mapping  On;.. 

3.2.1  Threats  of  Concern.  There  are  a  multiplicity  of  battlefield  threats  of  concern  to  SLAD.  These 
threats  can  be  generalized  into  generic  classes  of  threats,  as  listed  below  (for  more  detailed  information 
on  these  threats,  see  zum  Brunnen,  Kunkel,  and  Reza  1995). 

•  Ballistic  threats,  which  include: 

-  Armor  piercing  and  armor-piercing  incendiary 

-  High-explosive  and  high-explosive  incendiary 

-  Threat  platforms 

-  Propagators 

•  Chemical  and  biological  agents 

•  Obscurants 

•  Atmospheric  and  environmental  effects 
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Figure  3.  The  time-discrete  V/L  process  structure. 


•  Nuclear  weapons  effects,  which  include: 

-  Thermal  radiation 

-  Blast  and  shock 

-  Initial  nuclear  radiation  (INK) 


-EMP 


•  EW  threats,  which  include: 

-  RF  jamming 

-  High-power  microwaves  (HPM) 

-  Electromagnetic  compatibility  (EMC) 

-  Electromagnetic  interference  (EMI) 

•  Information  warfare^nformation  viruses 

Each  of  these  threats,  being  real-world  events,  has  a  specific  behavior  with  respect  to  time.  In  the  time- 
discrete  V/L  process  stnicture,  this  time  behavior  (for  all  threats)  is  described  by  the  supervector  time 

sequence  [T(ro)],  [T(r^)],  [T(r2)],  [T(r^)] - -  [T(/,)], . . .,  [T(r^^)],  where  =  final  time  sample  within 

a  particular  analysis.  There  is  a  possibly  of  coupling  between  threats  prior  to  initial  interaction  with  the 
target  system  (/^  ^  ™  situation,  new  coupled-threat  state  vectors  would  be  introduced  into 

[T(g]. 

3.2.2  V/L  Kolmogorov  Complexity.  In  this  subsection,  a  metric  is  introduced  for  the  puipose  of 
detennining  the  amount  of  information  required  in  a  target  description  in  order  to  perform  a  threat-specific 
V/L  analysis.  In  the  1960s,  the  Russian  mathematician,  A.  N.  Kolmogorov,  considered  the  problem  of 
the  intrinsic  descriptive  complexity  of  a  binary  symbol  string.  This  led  to  the  formulation  of  the 
Kolmogorov  complexity  Kfj(x)  of  a  symbol  string  x  with  respect  to  a  universal  computer  U,  defined  as 
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(2) 


Ky{x)  =  min  l(p) 
p:U(p)^x  « 


where  min  l(p)  =  the  minimum  length  of  the  symbol  string  p,  and  U(p)  =  x  defines  p  as  the  symbol  string 
(or  computer  program)  which,  when  fed  into  U,  produces  x.  Thus  p  can  be  viewed  as  the  minimum 
amount  of  information  required  by  the  universal  computer  U  (which  is  approximately  equivalent  to  any 
digital  computer)  in  order  to  calculate  x. 

As  an  example,  consider  a  binary  string  of  1,(XX)  bits.  If  the  sequence  of  bits  in  the  binary  string  is 
generated  in  a  completely  random  fashion,  such  as  in,  for  example,  the  string 
1(X)1(XXX)111(X)110110...1001011,  then  the  shortest  program  Pi  to  generate  this  string  is  ”x  = 

100100001 1 1001 101 10.. .1(X)101 1."  Assuming  that  the  information  content  of  an  alpha-muneric  symbol 
(other  than  0  or  1)  is  about  S  bits,  then  the  length  of  in  terms  of  information  is  1,010  bits.  Thus,  in 
this  instance,  .fiT^/lOOlOOOOl  11001 101 10...1001011)  =  1,010  bits. 

Now  suppose  that  we  generate  another  binary  string  of  1,000  bits,  namely 

101010101010101010.. .10101010.  The  shortest  program  P2  to  generate  this  second  binary  string  might 
be  "write  ’10’  500  times."  Using  the  above  criteria  for  alpha-numeric  characters,  the  length  of  P2  = 
^:tX101010101010101010...10101010)  =  67  bits,  so  that 

..fi:tX101010101010101010...10101010) «  ^^(lOOlOOOOl  1  lOOl  lOl  I...IOOIOI  lO).  (3) 

This  notion  of  algorithmic  complexity  can  be  extended  for  application  within  the  V/L  process 
stracture.  The  V/L  Kolmogorov  complexity  (or  just  V/L  complexity)  ^v/L^^inter-ono/.)  defined  as 

inter Mtud.')  “  I([S(r,-)]) 

[S(r.)]:Processv;L([S(^)])  = 


where  min  /([S(r,)])  =  the  minimum  size  of  the  target  system  supervector  as  sampled  at  the  initial 
threat/target  interaction  time  r,-,  and  the  expression  [S(r,)]:  Process v/L([S(r,)])  =  Jr,>«eruina/.  can  be 
inteipreted  as  "the  target  system  supervector  sampled  at  time  r,-,  which,  when  input  into  the  V/L  process 
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structure,  will  yield  a  complete  threat/target  interaction  analysis  specific  to  threat  ;c."  In  other  words, 
^V/L(%ter.anal.)  minimum  amount  of  system  information  required  by  the  V/L  analyst  to  perform  a 
threat/target  interaction  analysis,  specific  to  threat  x,  from  times  to  t^,  where  is  the  time  when  all 
primary  (if  not  secondary)  influence  of  the  threat  on  the  system  is  complete.  The  expression  "complete 
threat/target  interaction  analysis"  refers  to  the  condition  that  the  target  description  contains  enough  detail 
so  that  aU  damage  vectors  attributable  to  threat  x  (as  described  within  [T(rj)])  are  calculated. 

Zum  Brunnen,  Kunkel,  and  Reza  (1995)  address  an  aspect  of  V/L  complexity  by  observing  that  the 
complexity  of  a  target  description  is  directly  proportional  to  the  granularity  of  the  target  description.  This 
observation  supports  the  notion  of  .K'v/L^^inter.anal.)»  ®  amount  of  information  required  for  the 

analysis  of  the  interaction  between  a  threat  x  and  a  subsystem  s  is  less  than  (or  equal  to)  the  amount 
required  for  an  analysis  of  interaction  between  x  and  system  5,  where  5  is  a  subsystem  of  S,  and  the  state 
vector  [5(tj)]  describing  5  is  an  element  of  the  supervector  [S(r,)]  describing  5.  Perhaps  the  most 
interesting  use  of  ^y/L^-^intenanal.)  relative  ranking  of  V/L  complexity  as  a  function  of  threat.  As 

an  example,  consider  a  communications  shelter  containing  numerous  computers,  required  for  routing  and 
switching  electronic  communications.  For  a  ballistic  threat/target  interaction  analysis,  the  computers  within 
the  shelter  are  modeled  as  critical  components  with  appropriate  material  properties,  and  thus  the  internal 
circuit  boards  need  only  be  modeled  as  low-resolution  plates  (and,  in  some  instances,  may  not  need  to  be 
modeled  at  all).  For  a  nuclear  BMP  or  an  HPM  interaction  analysis,  the  computer  model  would  require 
a  granularity  up  to  at  least  the  integrated  circuit  (IC)  chip  level,  so  that,  in  this  instance, 
^V/L(ballistiCi„ter.anal.)  <  ^V/L(“UClear  EMPi„^,  ^  )  =i^v/L(HPMinter.anal.)-  In  theory,  the  V/L  complexity 
of  the  computer  specific  to  all  threats  of  concern  to  SLAD  can  be  calculated  and  then  used  to  rank  the 
various  threat-specific  target  information  requirements  within  an  integrated  target  description. 

3.2.3  Structure  of  die  0.p^g  Mapping.  The  purpose  of  the  coupling  mapping  is  to  couple  state 
vectors  in  [T(<„)]  to  other  state  vectors  in  [S(t„)]  (as  introduced  in  section  3.1).  As  previously  mentioned, 
this  operation  is  a  static  mapping  rather  than  a  dynamic  coupling,  and  perhaps  is  best  described  as  a 
process  which  "overlays"  variable-granularity  threat  state  vectors  at  spatial  points  aroimd  and  within  a 
three-dimensional  solid  geometric  (BRL-CAD)  model  of  the  target  system.  This  "overlay"  operation  is 
iterative  with  respect  to  time,  commencing  with  the  meta-vector  sampled  at  r,-  and  continuing  throughout 
succeeding  time  samples  until  the  termination  of  all  threat/target  system  interaction.  At  each  time  sample 
tj^  [T(rp]  is  updated,  and  the  state  vectors  within  [T(t;^)]  interacting  with  the  target  system  under  analysis 
are  remapped  to  current  interaction  sites. 
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3.3  The  Functional  Mapping  Po  p  and  the  Component  Functionality  Supervector  fF(01. 


3.3.1  Modular  Unix-Based  Vulnerability  Estimation  Suite  (MUVES)  Evaluation  Module  Concept. 
Before  we  address  the  Oj  p  functional  mapping  and  the  component  functionality  supervector  [r(r„)]  within 
the  time-discrete  V/L  process  structure,  a  similar  process  within  the  V/L  Taxonomy  is  introduced  as  it  is 
implemented  within  MUVES,  a  comprehensive  software  package  designed  for  ballistic  V/L  analysis 
developed  by  BVLD  of  ARL  (Murray,  Moss,  and  Coates,  in  publication).  The  process  for  detennining 
the  VL2  component  damage  metrics  within  the  V/L  Taxonomy  from  VLl  information  is  implemented  in 
the  MUVES  software  as  a  two-step  procedure.  The  first  step  involves  the  physics  of  the  interaction.  In 
this  step,  parameters  such  as  mass,  velocity,  and  material  properties  are  used  to  calculate  damage 
mechanisms,  such  as  depth  of  penetration  and  impulse  loading.  This  is  where  the  model  will  track 
secondary  threats  (those  created  by  the  interaction  of  the  primary  threat  with  the  target),  such  as  spaU  or 
fire.  One  indicator  of  the  fidelity  of  a  particular  model  is  if  and  how  it  tracks  secondary  threats,  and  the 
detail  with  which  it  does  so. 

The  next  step  of  the  MUVES  implementation  of  the  Oj  2  mapping  is  called  the  evaluation  module. 
This  combines  the  total  physical  damage  to  a  component  into  a  single  level  of  conceptual  damage,  where 
the  measure  of  damage  is  chosen  as  part  of  the  analysis  methodology.  Physical  damage  may  be  a  hole 
in  a  component,  temperature  elevation  (by  exposure  to  fire),  or  myosis  in  a  soldier  among  a  seemingly 
infinite  variety  of  possibilities.  All  known  damage  is  rolled  into  a  single  value  for  the  component,  which 
is  the  measure  of  its  damage.  This  could  be  a  probability  of  dysfunction,  or  a  degraded  level  of 
functionality,  or  some  other  metric  required  by  the  analyst  and  useful  as  an  input  to  the  O2  3  maf^ing. 
Within  the  context  of  current  ballistic  analyses,  this  mapping  of  physical  to  conceptual  damage  is 
accomplished  through  the  use  of  a  probability  of  component  dysfunction  given  a  hit  (Pcj/h)  curve,  where 
the  Ppjyi,  for  a  particular  component  under  analysis  is  a  function  of  both  the  mass  and  velocity  of  the 
impacting  ballistic  threat. 

3.3.2  Models  of  Component  Functionality.  Once  physical  damage  has  been  mapped  into  residual 
component-level  functionality,  the  component  functionality  supervector  [F(r^)]  is  established.  As 
introduced  in  section  3.1,  [F(r„)]  is  the  collection  of  all  available  information  addressing  the  functional 
states  of  all  components  within  the  target  system.  Each  component  is  represented  by  a  two-element 
functionality  state  vector,  the  second  element  being  a  numerical  functional  level  selected  from  the  interval 
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[0,  1].  One  method  of  modeling  continuous  functionality  levels  is  to  discretize  the  continuum  [0,  1]  into 
a  finite  set  of  functionality  values  relevant  to  a  component’s  functional  metric. 

As  an  example,  consider  a  halogen  flashlight  which  a  soldier  might  use  in  the  field.  The  critical 
components  within  the  flashlight  required  to  produce  illumination  include  a  dry-cell  DC  source,  a  halogen 
lightbulb,  conducting  cables  which  electrically  connect  the  battery  to  the  headlight,  and  an  off/on  switch. 
The  DC  source  contains  six  dry-cell  batteries  connected  in  series,  each  of  which  can  produce  a  potential 
difference  of  2  V;  thus,  the  total  battery  voltage  will  vary  between  0-12  V,  depending  on  the  residual 
charge  within  each  of  the  batteries.  The  battery  functionality  state  vector  expressed 

as  \function  =  "provide  a  direct  current  potential  difference  of  12  V  between  the  positive  and  negative 
terminals,"  ^source]  where  /^source  source  functionality  level.  The  functionality  of  the  DC  source, 

which  is  a  continuum  of  possible  values,  could  then  be  discretized  into  seven  different  values  contained 
in  the  set  {f^source^  “  1^3,  1/2,  2/3,  5/6,  1}  which  represent  available  source  voltages  of  0,  2,  4, 

6,  8,  10,  and  12  V,  respectively.  In  this  model,  we  assume  that  each  of  the  six  batteries  either  works  or 
doesn’t  work,  resulting  in  the  six  different  levels  of  positive  battery  functionality  (plus  the  completely 
nonfunctional  state).  Thus,  within  the  context  of  a  ballistic  threat  such  as  a  bullet,  any  one  of  the  six 
batteries  (as  well  as  combinations  of  the  six)  could  be  shorted  out,  reducing  the  total  somce  voltage  by 
2  V  per  each  damaged  battery. 

At  this  point,  it  is  useful  to  introduce  a  concept  from  information  theory  in  order  to  characterize  the 
degree  of  outcome  uncertainty  associated  with  a  stochastic  process.  The  entropy  H(X)  of  a  discrete 
random  variable  X  is  defined  by  Shannon  (1948)  as 


n 


H{K)  Pi  log2  (P.)’ 

i-l 


(5) 


where  the  sample  space  of  possible  values  of  the  random  variable  is  formed  by  the  discretization  of  the 
real  number  line  into  the  value  set  {Xj,  X2,  X3,  .  .  .,  X^}  with  respective  outcome  probabilities  {pj, 

P3>  •  •  •»  Pn)  (Shannon  1948).  In  this  context,  the  entropy  defines  the  level  of  average  uncertainty 
associated  with  each  X^.  in  {Xj,  X2,  X3, . .  .,  X„}.  For  a  discrete  uniform  random  binary  variable,  the 
sample  space  consists  of  {Xj  «  0,  X2  -  1}  with  respective  outcome  probabilities  {pj  -  0.5,  P2  =  0.5}  so 
that  H(X)  -  -((0.5*log2(0.5))  +  (0.5*log2(0.5)))  -■  1  bit  of  information.  This  quantity,  which  describes 
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the  uncertainty  in  outcome  of  the  classic  random  coin  toss  problem,  defines  one  unit  of  entropy,  and  thus 
serves  as  a  metric  by  which  the  relative  average  uncertainty  of  more  complex  (as  well  as  simpler)  events 
can  be  evaluated.  If  the  above  fimctionality  variable  follows  a  uniform  random  distribution,  then 

the  associated  entropy  =  -(7*(l/7)*log2(l/7))  =  2.81  bits.  Roughly,  this  means  that  almost 

three  times  as  much  information  is  required  to  determine  the  value  ^source  (compared  to  the  case  where 
^source  d^ned  as  a  binary  variable  (voltage! no  voltage).  Another  way  to  look  at  the  Shannon  entropy 
is  that  //(Fsouice)  average  amount  of  information  required  to  uniquely  select  any  one  element  of  the 
set  as  the  outcome  state  of  a  stochastic  threat/target  interaction  event.  If,  on  the  other  hand,  the 

seven  values  in  {/^source  J  respectively  follow  the  discrete  outcome  probability  distribution  {0, 1/7, 2/7, 3/7, 
1/14,  1/14,  0}  (shown  in  Figure  4),  then  the  associated  entropy  =  -((l/7)*log2(l/7)  + 

(2/7)*log2(2/7)  +  (3/7)*log2(3/7)  +  2*(l/14)*log2(l/14))  =  1.99  bits.  As  one  would  expect,  the  uniform 
random  distribution  yields  the  greater  entropy;  in  fact,  this  distribution  produces  the  maximal  entropy  per 
a  given  sample  space  cardinality. 

Next,  consider  the  halogen  lightbulb  within  the  flashlight  The  lightbulb  functionality  state  vector 
[Fjjghrt,uib(fn)]  can  be  expressed  [function  =  "provide  an  optimal  illumination  rated  at  200  W," 
where  Fiighthnih  is  characterized  by  the  binary  states  "illumination"  and  "no  illumination.”  Given  a  uniform 
random  distribution  of  associated  outcome  probabilities,  the  entropy  of  the  lightbulb  functionality  sample 
space  =  1  bit  (since  Fjjg|,jj,uib  ^  binary  variable).  Similarly,  conducting  cable  (or  simply 

cable)  and  on/off  switch  (or  simply  switch)  fimctionality  state  vectors  are  defined  as  [function  =  "provide 
a  continuous  electrical  path,"  [function  =  "provide  a  continuous  electrical  path  when  in  the  on 

position  and  an  electrical  discormect  when  in  the  position,"  respectively.  If  Fgaj,jg  and  F^^^^ 

are  also  defined  as  binary  variables  following  a  uniform  random  distribution,  then  H(F^^  =  77(Fs^i^.b)  = 
1  bit.  Given  that  the  states  F^^^,  Fjjg^j,,„j(,,  F^^jg,  and  F^^jg^  are  independent  statistical  events  (in  that 
the  damage  state  of  one  component  does  not  contribute  to  the  damage  state  of  another  component),  then 
^(^source)  ^(^Ughtbuib)  +  ^(^cabie)  +  ^(^switch)  =  5-81  bits.  In  Other  words,  file  information  entropies 
of  a  set  of  discrete  random  variables  are  additive  if  and  only  if  all  variables  in  the  set  are  statistically 
independent  of  each  other.  It  is  interesting  to  compare  this  value  of  total  "system  damage"  entropy  with 
that  value  given  that  all  four  component  functionalities  are  binary,  i.e.,  + 

//(Fggbie)  +  ^(^switch)  “  ^  difference  indicates  the  amount  of  additional  information  required 

when  modeling  F^^^^  with  fractional  values. 
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3.3.3  Effects  of  Extensive  Component  Damage  on  Functional  Models.  One  important  point  which 
we  have  not  yet  addressed  is  the  mutable  effect  of  component  damage  on  functionality  models.  The 
examples  given  so  far  address  only  changes  in  component  functionality  levels;  what  if  the  effects  of  the 
threat-induced  damage  actually  alter  the  physical  aspects  of  component  configuration  to  a  point  where  the 
nature  of  the  associated  functionality  sample  space  is  changed? 

Consider  the  DC  source  described  in  section  3.3.2.  If  one  of  the  batteries  is  shorted  by  a  bullet,  then, 
assuming  that  each  cell  produces  2  V,  the  maximum  voltage  output  from  the  DC  source  is  reduced  from 
12  to  10  V.  This  fits  within  the  model  which  we  have  thus  far  developed.  But  what  if  a  chemical  agent 
dissolves  the  insulator  jacket  on  a  battery  cable,  connected  to  the  positive  battery  terminal,  to  a  point 
where  the  cable  intermittently  and  randomly  arcs  to  ground?  This  new  component  configuration  would 
modify  the  Ogj,  mapping,  resulting  in  a  new  distribution  of  component  functionality  levels. 

In  theory,  there  are  an  infinite  number  of  damage  configurations  for  a  particular  component  that  would 
allow  for  some  residual  post-damage  functionality  within  the  semi-inclusive  interval  (0,  1].  Of  course, 
this  number  would  be  greatly  reduced  by  the  practical  requirements  of  the  system-level  capability,  which 
depends  on  the  component  in  question.  The  functional  performance  metric  of  the  component  would  not 
be  altered,  only  the  distribution  of  functionality  levels.  One  could  discretize  the  continuum  of  possible 
damage  configurations  into  several  classes  and  then  assign  a  specific  component  functionality  model  to 
each  class  (this  subject  will  be  further  addressed  in  a  followup  technical  report). 

3.4  The  Capability  Tree/Network  Manning  Op,^  and  the  System  Capability  Supervector  rC(r„)l. 

3.4.1  Boolean  Capability/Fault  Trees.  One  possible  candidate  for  use  in  implementing  the  Op^;; 
mapping  within  the  time-discrete  V/L  process  structure  is  the  capability/fault  tree  methodology  currently 
utilized  within  the  MUVES  analysis  environment.  This  methodology,  which  essentially  executes  the  O2  3 
mapping  within  the  V/L  Taxonomy,  is  encapsulated,  for  a  particular  target  system,  within  what  is  called 
a  system  definition  file,  which  is  a  description  of  target  subsystem  operation  in  terms  of  critical 
components.  Critical  components  are  components  required  for  the  continued  performance  of  specific 
subsystem-level  capabilities,  such  as  mobility,  speed,  firepower,  communication,  and  so  on.  In  MUVES 
teminology,  target  subsystems  are  defined  by  relationships  betweai  groups  of  target  components;  thus, 
VL3  capability  states  are  the  ouq)ut  product  of  target  subsystems.  The  operational  states  of  individual 
critical  components,  which  are  currently  limited  to  binary  values  (0/1),  can  be  expressed  in  terms  of  (1)  lof 
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(loss  of  function),  (2)  frf  (fractional  remaining  functionality),  where  frf  =  1  -lof,  (3)  probability  of  kill 
{p0,  (4)  hit  (hit  flag,  0  or  1),  and  (5)  killed  (killed  flag,  0  or  1).  The  system  definition  file  then  defines 
how  these  component  states  are  combined  to  result  in  capability  metrics. 

System  definition  expressions  are  created  by  combining  component  states  with  either  unary  or  binary 
operators  or  specific  functions.  A  unary  operator  operates  on  a  single  component  state,  while  a  binaiy 
operator  evaluates  two  component  states  which  it  joins.  Functions  are  either  user-defined  (IF  and  IFELSE) 
or  predefined  (random  uniform,  random  normal,  and  equal)  and  can  operate  on  one  or  more  component 
states.  Table  1  gives  a  summary  of  all  available  operators  and  functions  within  MUVES. 

Using  a  system  definition  file,  either  a  capability  or  a  fault  tree  operating  under  the  rules  of  Boolean 
logic  can  be  constructed  for  each  system-level  capability  associated  with  the  system  under  analysis.  The 
difference  between  a  capability  tree  and  a  fault  tree  is  that  the  fonner  evaluates  component  states  as  pfs, 
linking  these  states  through  positive  logic,  while  a  fault  tree  evaluates  component  states  as  lofs,  linking 
these  states  through  negative  logic  (Kunkel,  in  preparation).  In  this  report,  we  will  focus  only  on 
c^ability  trees.  These  trees  are  series/paraUel  constructs,  a  series  construct  requires  all  component  states 
in  the  construct  to  be  nonzero  for  a  resultant  nonzero  capability  level  (logical  AND),  while  a  parallel 
construct  requires  only  one  nonzero  component  state  for  a  nonzero  capability  (logical  OR).  Typically, 
most  systems  will  require  a  complex  network  of  connected  series  and  parallel  constructs  for  capability- 
state  evaluation.  Also,  all  component  states  are  assumed  to  be  pairwise  independent  Currently, 
component  states  are  modeled  simply  as  binary  ftmetions,  where  "1"  indicates  full  functionality  and  "0" 
indicates  full  nonfimctionality  (Roach  1993). 

As  an  example  of  a  Boolean  capability  tree,  consider  the  halogen  flashlight  system  discussed  in 
section  3.3.2.  If  source,  cables,  switch,  and  lightbulb  represent  the  binaiy ///’s  of  the  DC  source,  cables, 
on/off  switch,  and  lightbulb,  respectively,  then  the ///of  the  illumination  capabUity  is  expressed  through 
the  system  definition 


IIlunilnation_frf  =  source  &  cables  &  switch  &  lightbulb,  (6) 

where  is  the  Backus-Naur  notation  for  the  logical  AND  function.  Figure  5  illustrates  the  graphical 
structure  of  this  capability  tree.  In  this  case,  all  components  within  the  tree  either  work  (functionality 


20 


Table  1.  Operators  and  Functions  Within  MOVES 
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state  =  1)  or  do  not  woik  (functionality  state  =  0).  Also,  the  illumination  capability  of  the  flashlight  is 
a  binaiy  metric,  either  producing  illumination  (illumination^frf  =  1)  or  no  illumination 
(illuinination_frf  =  0).  Since  all  components  are  connected  in  series,  there  is  only  one  tree  configuration 
that  will  produce  an  illumination  capability,  namely  source  =  cables  =  switch  =  lightbulb  =  1.  In  other 
words,  all  components  must  function  in  order  for  the  capability  to  operate. 

3.4.2  Transfer  Functions.  The  biggest  limitation  of  the  Boolean  capability/fault  tree  methodology  (as 
is  currently  used)  is  its  inability  to  account  for  pairwise  dependence  between  component  states.  As 
previously  defmed  in  section  3.3.2,  component  functionalities  are  mutually  independent  of  one  another  as 
far  as  they  are  affected  by  damage  vectors.  But  when  components  are  linked  together  to  produce  a 
cj^ability,  there  is  usually  some  level  of  mutual  dependence  between  the  components  involved.  We 
choose  to  call  the  mutuaUy  independent  states  independent  fUnctionaUties  and  the  mutually  dependent 
states  dependent  functionalities',  in  general,  the  total  operational  function  of  a  component  is  itself  a 
function  of  both  its  independent  functionality  (based  on  component  damage)  and  its  dependent 
functionality  (due  to  connections  with  other  components).  Again,  let  us  consider  the  halogen  flashlight 
system  as  an  example.  In  a  real  system,  the  ability  of  the  lightbulb  to  produce  light  is  dependent  on  the 
functionality  of  the  DC  source  in  a  manner  which  is  described  by  the  relation 


^^^^^headlight  ~ 


( ^'®^^^5^source} 
Resistance^^^l^g^^  filament 


(7) 


where  Resistance^^Y^^^^HJ  filament  =  (12  V)^/2{X)  W  =  0.72  SI  (here  we  make  the  assumption  that  filament 
resistance  is  not  dependent  on  filament  temperature).  We  call  the  above  equation  a  tranter  function,  in 
that  it  transfers  a  quantity  (voltage)  produced  in  one  component  (the  DC  source)  into  another  quantity 
(illuminative  power)  produced  in  a  second  component  Gightbulb).  The  cables  and  switch  serve  as  the 
transfer  channel.  We  can  convert  the  above  equation  to  a  normalized  transfer  function  involving 
and  Crnumination  defining 


DC  source  voltage 
12  V  (maximum  voltage) 


(8) 
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and 


n 

^illumination 


lightbulb  power 


200  W  (maximum  rated  power) 


and  then  replacing  equations  (8)  and  (9)  into  equation  (7): 


(9) 


200  W  *  = 


(l2  V  *  F 

^  source/ 


(10) 


which  reduces  to 


■"illumination 


144 

1‘t^  V  *  ^source 

200  W  ♦  0.72  a 


source  * 


(11) 


Note  the  difference  between  equation  (11)  (where  Ci]i„n,inarinn  Is  a  function  of  and  the  Boolean 

product  expressed  in  equation  (6)  (where  Cju^^unation  ^  ^  function  of 

Within  a  complex  subsystem  containing  numerous  components,  one  could  define  transfer  functions 
that  move  quantities  (such  as  voltage,  current,  electrical  or  mechanical  power,  and  information)  from 
component  to  component.  Given  that  the  engineering  process  equations  are  known,  these  transfer 
functions  could  be  implemented  within  a  capability  tree,  allowing  for  continuous  rather  than  binary  values 
of  component  functionality.  However,  since  transfer  functions  assume  an  inherent  intercomponent 
causality  (i.e.,  the  state  of  component  2  is  caused  by  the  state  of  component  1),  the  capability  tree  must 
be  modified  in  order  to  incorporate  flow  vectors  between  components.  This  directional  information  within 
the  tree  results  in  a  capability  network.  Given  a  system  consisting  of  n  critical  components  operationally 
connected  in  serial,  the  network  transfer  function  would  be  of  the  form 


C  =  C 


COMPw 


COMP/i-1KCOMP«-2 


(^C 


COMP2rCOMPl 


(12) 
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which  is  read  as  "the  capability  C  is  a  function  of  /^comp/«>  which  is  a  function  of  ^coMPn-i*  which  is  a 
function  of  ^compw-2>  which  is  a  function  of  . . .  ^comp2>  which  is  a  fimction  of  ^compi»"  where 
FcoMPi  =  functionality  of  the  itth  component.  If  all  transfer  functions  within  the  capability  network  were 
linear  (i.e.,  /^coMP*+/  =  *  ^COMP*’  where  is  a  constant),  then  the  Boolean  c^ability/fault  tree 

methodology  would  suffice.  In  the  case  of  nonlinear  transfer  functions  (as  in  equation  (7)),  a  network 
approach  is  the  more  desirable.  This  concept  will  be  further  investigated  in  a  followup  technical  report. 

3.4.3  Multibranch  Capability  Trees.  As  a  final  candidate  for  use  in  implementing  the  Op  ^  mapping, 
we  now  consider  an  extension  of  the  Boolean  capability  tree.  In  section  3.4.2,  the  notion  of  inter¬ 
dependent  components  was  introduced,  where  the  functional  state  of  component  y  is  dependent  on  the 
functional  state  of  component  x.  This  dependence  can  be  characterized  by  a  conditional  rule  of  the  type 
IF  Fjj  =  Aj,  THEN  Fy  —  {Bj-,  Bj-^2»'**»  Bj-^^},  where  Aj  and  the  elements  of  {B,-,  B^+j,  B,+2-—  ^/+/} 

are  discrete  intervals  within  the  inclusive  range  [0,  1].  In  the  generic  case,  Aj  is  a  random  discrete 
functionality  variable  sampled  from  the  domain  set  {Aj,  A2,  A3,...,  A^},  and  {B,-,  B,-^.j,  B,-^.2>— •  ^i+i)  ‘s  a 
discrete  random  scheme  subset  to  the  discrete  random  scheme  {Bj,  B2,  B3,...,  B„},  where  //({B,-, 
B,+2....,  5,+/})  ^  ^((^1.  ^2*  ^3-"  ^n))-  If  range  set  {B,-,  B;+i,  B;+2.-.  5/+/}  contains  only  one 
element,  then  Fy  is  completely  deterministic.  Also,  Aj  can  be  a  logical  product  (using  the  AND  operator), 
a  logical  sum  (using  the  OR  operator),  or  a  combination  of  products  and  sums  among  a  collection  of 
discrete  random  funetionality  variables  Ay^  Aj^,  A^ . A-^. 

The  IF/THEN  type  of  logical  production  rules  described  previously  can  be  used  to  form  a  multibranch 
capability  tree.  This  is  a  structure  which  links  all  critical  component  fimctionality  levels  to  corresponding 
system  capability  levels  via  logical  production  rules,  and  is  similar  to  the  notion  of  a  Boolean  capability 
tree  except  that  pair-wise  dependence  between  components  is  considered.  The  generic  multibranch 
capability  tree  is  grai^cally  represented  as  a  sequence  of  data  nodes  linked  by  vertical  "branches."  A  data 
node  is  created  by  discretizing  the  continuous  functionality  range  [0, 1]  associated  with  a  component  into 
the  rt+1  intervals  [0],  (0,  Xj],  (X^j,  X2],  (X2,  X3],...,  (X„.2.  which  are  then  mapped  into  the 

data  node  values  0,  Xj,  X2,  X3,...,  X„.j,  1,  respectively. 


To  illustrate  the  concept  of  a  multibranch  capability  tree,  we  again  consider  the  halogen  flashlight 
system.  Let  us  fiirther  assume  that  we  lack  equation  (7)  (relating  DC  source  voltage  to  lightbulb  power), 
so  that  our  understanding  of  the  operation  of  the  flashlight  is  based  solely  on  empirical  data.  Table  2 
presents  data  gathered  from  a  series  of  hypothetical  experiments  on  the  flashlight,  where  seven  permissible 
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values  of  were  combined  with  binary  values  of  Fjjghtbuib-  ^cabie>  and  F^^itch.  and  the  resulting 

illumination  capability  was  evaluated  by  a  group  of  soldiers  with  20/20  vision.  The  illumination  capability 
metrics  used  were  perceptual  in  nature;  no  illumination  =  0).  dim  =  1/3), 

moderate  =  2/3),  and  bright  =  !)•  Although  Ciuu^in^tion  is  really  a  continuous 

function,  the  soldiers  reported  perceived  illumination  at  the  granularity  of  the  above  four  metrics.  The 
production  rules  in  Table  2  are  thus  generated  by  statistically  fitting  the  responses  of  the  sample  group 
of  soldiers  to  the  four  above  capability  metrics.  Figure  6  shows  how  this  empirical  data  can  be  graphically 
represented  as  a  multibranch  capability  tree.  In  this  example,  the  value  of  determines  which  of 
four  possible  branches  is  followed  within  the  capability  tree,  where  each  branch  maps  to  a  unique  state 
within  the  output  data  node  (representing  the  capability  to  provide  illumination  in  terms  of  lightbulb  rated 
power). 


Table  2.  Production  Rules  (Based  on  Empirical  Data)  for  the  Evaluation  of 


^  ^source  -  0-^)  AND  =  1,  THEN  CjUumination  =  0  ("»  iUumination), 

^source  ~  Q-^)  AND  Fgabies  ~  ^switch  ~  ^lightbulb  ~  THEN  ~  (dim), _ 

^  ^source  ~  ^*9)  AND  ~  1,  THEN  ^illumination  ~  (moderate), 

^source  ~  [0.9,  1.0]  AND  Fables  ~  ^switch  ^lightbulb  ~  THEN  ^jUmnination  ~  ^  (bright), _ 


3.4.4  Comparison  of  Methodologies.  Figure  7  displays  a  comparison  of  the  three  Op^  mapping 
methodologies  presented  in  the  previous  sections:  a  graph  which  plots  discrete  values  of  as 

a  function  of  where  Fg^yes  =  Fg^itch  =  ^Ughtbuib  =  1-  Given  that  F^^^  may  assume  one  of  the 

seven  values  in  the  set  {0,  1/6,  1/3,  1/2,  2/3,  5/6,  1),  Ciji„n,i^iion  ^  calculated  three  different  ways: 
G)  ^illumination^  ^source  *  ^cables  *  ^switch  *  Fiig^^uib  (Boolean  Capability  tree),  (2)  by  using  equation  (11) 
(normalized  transfer  function),  and  (3)  by  using  Table  2  (multibranch  capability  tree).  Although  there  is 
complete  agreement  between  the  three  methodologies  at  Ciuummadon  =  0  and  at  CiuumiMtion  =  1*  *ere  is 
considerable  variation  in  the  interval  Cmumination  =  (0-  G-  Which  of  these  methodologies  is  best  to  use 
or  is  at  least  sufficient  for  a  particular  analysis  is  a  judgement  call  left  to  the  analyst. 
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3.5  The  Discrete  Time  Mapping  0(Af^  ^ 


3.5.1  Detenninistic  vs.  Stochastic  Processes.  As  discussed  in  section  3.1,  the  discrete  time  mapping 
operator  0(Ar„  considers  both  deterministic  and  stochastic  outcome  events  occurring  at  time 
based  on  the  state  of  the  meta-vector  [M(r^)].  Deterministic  events  are  representable  by  systems  of 
differential  equations,  where  the  time  differential  dt  is  approximated  by  the  mapping  interval  A/„ 
Stochastic  events,  on  the  other  hand,  are  fimctions  of  random  variables,  which  coll^se  to  specific  values 
at  a  sampling  time  Most  events  are  actually  combinations  of  both  detenninistic  and  stochastic  events, 
where  a  random  variable  characterizing  a  system  state  might  collapse  to  a  particular  value  at  r„,  which  is 
then  mapped  to  a  state  at  via  differential  equations.  Thus,  the  transition  matrix  in  Equation  (1)  can 
be  decomposed  into 


(13) 


where 

^sto(^n)  =  stochastic  transition  matrix  operating  on  [M(r„)]. 

=  deterministic  transition  matrix  operating  on  [M(/^)]. 

The  nature  of  stochastic  events  requires  that  multiple  trials  are  run,  where  each  trial  collapses  one  or  more 
random  variables  associated  with  a  stochastic  process  into  measurable  states  via  a  random  selection  process 
(Monte  Carlo  routine).  Thus,  in  general,  the  meta-vector  [M(r„)]  is  decomposable  into  a  set  of  m  meta¬ 
vectors  { [M(r^)^],  [M(r^)^],  [M(fJ^],...,  [MC/^)"*] }  associated  with  m  trials,  the  resulting  statistics  of  which 
are  then  used  to  make  inferences  within  a  V/L  analysis.  The  Shannon  information  entropy  HQC) 
(introduced  in  section  3.3.2)  can  be  utilized  to  study  the  relative  outcome  uncertainty  of  all  random  events 
within  [M(r„)]  (since  random  component  functionality  levels  are  resultant  from  component  damage  caused 
by  both  randomly  generated  threat  events  and  secondary-effects  damage  mechanisms).  In  this  application, 
one  would  expect  entropy  levels,  for  a  particular  analysis,  to  be  a  fimction  of  stochastic  trial  frequency. 

When  considering  time-embedded  events,  the  relative  timescales  become  a  problem  when 
corresponding  to  one  type  of  threat/target  interaction  is  several  orders  of  magnitude  smaller  than  a 
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corresponding  to  another  type  of  threat/target  interaction,  as  in  the  case  of  an  electromagnetic  threat  time- 
embedded  within  a  chemical  threat  (where  the  entire  lifetime  of  the  particular  threat  in  question  is 
considered).  This  phenomena  is  accounted  for  within  the  0(Ar^^^i)  operator  in  the  form  of  the  stochastic 
"noise"  vector  which  represents  possible  random  processes  within  the  time  interval  [/^,  t„^j] 

(as  introduced  in  section  3.1).  In  this  sense,  aU  processes,  either  deterministic,  stochastic,  or  a  mixture 
of  die  two,  which  evolve  according  to  a  timescale  defined  by  appear  as  "system  noise"  when 

embedded  within  another  process  which  evolves  on  a  timescale  defined  by  Ar^^^jP,  where  « 

(a  difference  of  approximately  two  orders  of  magnitude  or  greater).  This  system  noise  is 
analogous  to  random  noise  that  might  arise  within  an  electronic  finite-state  machine,  such  as  a  digital 
computer,  the  noise  is  actually  generated  by  the  operation  of  the  system  (or  process)  itself.  In  the  case 
of  V/L  analyses,  this  is  not  really  true,  but,  when  examining  two  threats  that  evolve  according  to  greatly 
disparate  timescales  (as  in  the  instance  of  an  EM  threat  and  a  chemical  threat),  the  "system  noise"  model 
should  prove  to  be  a  good  approximation. 

3.5.2  V/L  Heuristics. 

Combined  Effects  Heuristics.  One  of  the  primary  advantages  of  an  integrated  system  analysis  is  the 
opportunity  to  determine  the  net  effects  of  dynamically  combined  threats.  However,  these  combined 
threats  are  very  complex  in  nature  due  to  (1)  greatly  disparate  time  scales  among  the  threats  of 
consideration  and  (2)  complex  coupling  between  threatAarget  interaction  processes.  It  is  reasonably 
straightforward,  however,  to  develop  a  set  of  rules  of  thumb  in  order  to  determine  first-order  combined- 
threat  efi^ects  on  systems.  These  generic  (nonsystem-specific)  rules  wiU  be  referred  to  as  combined-effects 
heuristics  and  will  serve  to  supplement  the  0(Ar„^^y)  mapping. 

Since  many  threat-specific  analyses  utilize  computer  codes  and  experimental  results  that  ignore  the 
possible  influence  of  other  battlefield  threats,  the  combined-effects  heuristics  are  based  on  the  collective 
expertise  of  experienced  analysts  in  all  threat  areas  of  concern.  This  multiple  expertise  is  integrated  into 
a  set  of  production  rules  operating  within  an  IF/THEN  stmcture.  Only  a  very  small  percentage  of  threat 
events  would  actually  combine  synchronously;  most  combined-threat  effects  are  created  by  sequential 
threat  events  occurring  within  a  "small"  interval  of  time,  or  embedded  events  (where  a  10-ms  ballistic 
event  might  occur  within  the  3-hr  life  span  of  a  chemical  event,  as  discussed  in  section  3.5. 1).  In  the  case 
of  sequential  threat  events,  the  analyst  must  be  carefiil  not  to  assume  commutivity  between  event  times. 
As  an  example,  consider  a  communication  shelter,  a  ballistic  event  followed  by  a  nuclear  EMP  event 
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might  result  in  a  compromise  of  the  shelter’s  EM  shielding  and  thus  higher  coupling  of  the  EMP  into  the 
system,  while  the  reverse  situation  would  offer  little  or  no  interthreat  enhancement. 

The  IF/THEN-type  of  logical  production  rules  that  form  the  stmcture  of  the  combined-effects 
heuristics  can  be  graphically  represented  within  a  multibranch  tree  structure  similar  to  that  of  the  c^ability 
trees  discussed  in  section  3.4.3.  Figure  8  presents  an  example  of  such  a  combined-elfects  heuristics  tree, 
with  multistate  data  nodes,  which  describes  two  different  combined  ballistic/pulsed  EM-event  (where  the 
ballistic  event  precedes  die  EM  event)  conditional  production  rules:  (1)  "IF  the  average  weight  of  a 
ballistic  fragment  =  {less  than  SIX)  grains)  AND  the  average  number  of  apertures  in  the  metallic  portion 
of  a  system’s  exterior  body  (as  a  resultant  from  penetrating  fragments)  per  square  meter  =  (9  to  15}  AND 
E>q^  (the  frequency  range  within  which  greater  than  50%  of  the  total  EM  spectral  energy  is  located)  for 
a  pulsed  EM  event  =  {/<  100  MHz),  THEN  the  additional  EM  coupling  (E-field)  due  to  a  comtnned 
ballistic/EM  effect  =  (0  to  10  dB},"  and  (2)  "IF  the  average  weight  of  a  ballistic  fragment  =  (500  to 
1,500  gr)  AND  the  average  number  of  apertures  in  the  metallic  portion  of  a  system’s  exterior  body  per 
square  meter  =  (1  to  3}  AND  E^j  for  a  pulsed  EM  event  =  (1  GHz  <  /<  10  GHz),  THEN  the 
additional  EM  coupling  due  to  a  combined  baUistic/EM  effect  =  {51  to  100  dB}.’’  In  theory,  one  could 
constract  60  different  production  rules  using  the  four  input  data  nodes  in  combination  with  AND 
conjunctive  operators,  given  that  each  production  rule  is  defendable  in  terms  of  either  prior  analysis, 
experimentation,  or  viable  engineering  judgement. 

Secondary  Effects  Heuristics.  In  addition  to  combined  effects,  an  equally-important  aspect  of  V/L 
analyses  are  secondary  threat  effects,  which  arise  within  a  system  when  damaged  components  interact  in 
a  systemic  fashion.  These  secondary  effects  are  connected  to  a  particular  threat  event  in  the  sense  that 
the  threat  event  is  an  indirect  (rather  than  a  direct)  cause  of  the  effect  (as  opposed  to  a  primary  threat 
effect,  which  has  as  a  direct  cause  a  particular  threatAarget  interaction  resulting  in  component  damage  or 
malfunction).  Secondary-effects  models  are  as  complex  to  formulate  as  are  combined-effects  models,  and 
thus,  in  many  cases,  the  development  of  secondary-effects  heuristics  would  benefit  the  V/L  analyst  in  a 
similar  maimer  as  would  combined-effects  heuristics.  These  secondary-effects  heuristics  also  serve  to 
supplement  the  0(Ar„^^i)  mapping. 

Secondary-effects  heuristics  may  also  be  graphically  represented  in  a  tree  structure,  as  shown  in 
Figure  9.  In  this  scenario,  a  missile  is  intercepted  by  an  RF  jamming  signal,  which  upsets  the  missile’s 
telemetry  computer.  A  possible  resulting  secondary  effect  that  would  degrade  the  missile’s  lethality  is 
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Figure  8.  BallisticAiuclear  BMP  combined-effects  heuristics. 
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Functionality  of  Missile  Telemetry  Computer  at  4 


Figure  9.  Missile/RF  jamming  signal  secondary-effects  heuristics. 
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described  in  the  production  rule  "IF  the  functionality  level  of  the  missile  telemetry  computer  at  time  = 
(0.5,  0.75]  AND  the  likely  recovery  time  of  the  telemetry  computer  to  a  fimctional  level  within  the  interval 
(0.75,  1.0]  =  {10-100  ms]  AND  the  missile  speed  =  [1,000,  2,000]  miles/hour,  THEN  the  probability  of 
a  primary  target  hit  =  (0.4,  0.6]."  Since  the  states  represented  within  a  supervector  are  discrete  in  nature, 
the  above  probability  of  a  primary  target  hit  must  be  "collapsed"  to  a  distinct  hitAio  hit  outcome  via  a 
random  decision  process  such  as  a  Monte  Carlo  algorithm  (where  the  "hit"  threshold  could  be  set 
anywhere  within  the  semibounded  interval  (0.4,  0.6]).  Within  this  secondary-effects  tree,  there  are  80 
different  possible  production  rules;  in  this  case,  statistical  data  based  on  simulations  or  experimentation 
is  required  for  rule  verification. 

4.  APPLICATION  OF  THE  TIME  DISCRETE  V/L  PROCESS  STRUCTURE 

Many  of  the  concepts  introduced  in  the  previous  sections  can  be  applied  to  the  V/L  simulation  of  a 
military  system,  such  as  an  attack  helicopter  interacting  with  both  a  long-term  chemical  threat  and  several 
near-instantaneous  ballistic  threats.  The  first  step  in  the  application  is  to  formulate  the  parameters  of  both 
chemical  and  ballistic  threats  for  inclusion  within  the  threat  supervector  [T(/;,)].  For  a  kinetic  energy  (KE) 
penetrator,  threat  parameters  would  include  projectile  dimension,  material  properties,  fragment 
characteristics,  functional  capacity,  and  state  of  motion  (Burdeshaw  1995).  For  a  chemical  cloud,  threat 
parameters  would  include  such  information  as  height  of  the  chemical  threat  event  (initial  release  of  the 
chemical  agent),  type  of  chemical  agent,  agent  propagation  medium  (dry  powder,  liquid,  slurry),  properties 
of  the  agent  propagation  medium  (particle  size  distribution,  density  of  liquid),  and  meteorological 
conditions. 

After  [T(r„)]  is  deteimined,  the  next  step  in  setting  up  the  SLV  "architecture"  is  to  construct  the 
system-level  cq)ability  supervector  [C(r„)].  It  is  necessary  to  set  up  [C(r„)]  next,  since  elements  of  the 
critical  component  functionality  supervector  [F(/„)]  are  deteraained  from  the  contents  of  [C(/^)].  The 
capability  supervector  for  an  attack  helicopter  would  contain  a  series  of  capability  state  vectors  divided 
between  the  three  capability  classes  MOVE,  OPERATE,  and  COMMUNICATE  (Kunkel  1995).  MOVE 
capabilities  would  include  subsystem  functions  such  as  engine  fuel  delivery,  mechanical  engine  processes 
such  as  combustion  and  compression,  and  flight  controls.  OPERATE  capabilities  would  include  subsystem 
operaticHis  such  as  navigation,  target  detection,  acquisition,  and  identification,  and  munitions  control. 
Finally,  COMMUNICATE  capabilities  would  include  subsystem  applications  for  both  voice  and  data 
communications. 
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Next,  the  critical  component  functionality  supervector  [F(r„)]  is  formulated.  This  process  involves 
identifying  sets  of  components  contained  within  the  attack  helicopter  system  that  are  critical  for  the 
operational  implementation  of  the  capabilities  contained  in  [C(r„)].  At  this  point,  we  can  also  formulate 
the  Op  c  mapping.  The  logic  used  within  this  mapping  operation  is  dependent  on  whether  the  analyst  is 
interested  in  calculating  residual  capability  (thus  using  positive  logic)  or  loss  of  capability  (thus  using 
negative  logic)  as  metrics  within  [C(/„)].  It  is  recommended  that  the  analyst  utilize  networks,  as  opposed 
to  trees,  when  mapping  component  functionalities  to  nonbinary  capability  metrics. 

Finally,  the  target  system  supervector  [S(r„)]  is  formulated.  At  the  very  least,  [S(r„)]  must  contain 
information  on  the  physical  configuration  of  all  critical  components  listed  within  [F(r„)].  In  addititm, 
[S(r^)]  must  also  contain  information  on  the  physical  configuration  of  noncritical  components  which,  upon 
interacting  with  a  threat,  will  affect  the  physical  state  of  one  or  more  critical  components  (i.e.,  a  rubber 
seal  surroimding  the  cockpit  door  on  the  attack  helicopter  must  be  modeled  in  order  to  determine  chemical 
agent  infiltration  into  the  cockpit,  which  could  degrade  the  functionality  of  the  pilot,  a  critical  component 
within  the  flight  control  capability).  The  contents  of  the  target  system  supervector  [S(r„)]  would  consist 
of  a  BRL-CAD  target  description  of  the  attack  helicopter,  including  information  necessary  for  both 
ballistic  and  chemical  analyses  of  all  critical  components  identified  in  [F(r„)],  such  as  material  type  and 
density. 

Once  all  elements  of  the  meta-vector  [M(/„)]  =  {[T(r„)],  [S(r^)],  [F(r„)],  [C(r„)])  and  the  Op  c  mapping 
have  been  formulated,  the  time  mapping  0(Ar„^^.i)  is  constructed.  This  mapping  would  consist  of 
algorithms  that  model  the  dynamical  behavior  of  the  threat,  the  threatAarget  system  interaction,  and  the 
post-threat-interaction  response  of  components  within  a  subsystem  (engineering  performance  models).  In 
the  case  of  the  present  example,  computer  codes  such  as  the  Chemical/Biological  Agent  Vapor,  Liquid, 
and  Solid  Tracking  model  VLSTRACK  (chemical  cloud  formation  and  dynamics),  and  the  Chemical 
Defense  Materials  Database  (chemical  agent  effects  on  materials)  would  be  used  for  the  chemical  threat 
dynamic  analysis,  while  codes  which  use  the  JTCG/ME  penetration  modules  in  MUVES  (penetrator 
dyruimics  and  resulting  target  system  damage)  would  be  used  for  the  ballistic  threat  dynamic  analysis 
(Burdeshaw  1995).  We  will  assume  that  engineering  performance  models  (EPMs)  also  are  available  to 
model  the  dynamical  post-threal/target-interaction  subsystem  response. 

Once  the  V/L  process  architecture  for  this  example  is  completed,  the  simulation  is  ready  to  run.  The 
global  time  scale  of  the  simulation  is  set  to  one  time  sample  per  second  (r„^.y(global)  -  /„(^obal)  =  1.0  s) 
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to  track  the  infiltration  of  the  chemical  agent  into  the  helicopter  cockpit.  Within  several  of  these  intervals, 
KE  penetrators  impact  the  body  of  the  helicopter,  resulting  in  several  holes  in  the  cockpit  wall.  The  local 
time  scale  for  these  ballistic  interactions  is  set  to  one  time  sample  per  1  ms  (local)  -  t„(local)  * 
10  s).  Figure  10  illustrates  the  time-discrete  V/L  process  structure  applied  to  the  global  time  interval 

between  t„(global)  =  6.00  x  10^  s  (10  min)  and  t„^.;(global)  -  6.01  x  10^  s  (10  min  and  1  s).  Within  this 
interval,  a  KE  penetrator  produces  a  hole  in  the  cockpit  wall.  As  a  result,  the  dynamical  history  of  the 
chemical  cloud  will  indicate  a  discontinuity  within  this  interval  as  the  cloud  begins  to  seep  through  the 
hole.  This  discontinuity  is  attributable  to  the  cockpit  hole  that  seems  to  "instantaneously"  appear  with 
respect  to  the  global  time  scale.  The  total  duration  of  the  ballistic  "V/L  process"  is  100  ms. 

5.  CONCLUSIONS 

In  this  report,  we  have  introduced  the  time-discrete  V/L  process  structure,  a  mathematical  architecture, 
based  on  the  V/L  Taxonomy,  for  the  conduct  of  dynamic  V/L  analyses  of  battlefield  threat/target  system 
interactions  and  subsequent  degradation  of  the  mission  capabilities  of  the  target  system.  By  decoupling 
the  mappings  within  a  V/L  process  structure  into  those  which  statically  process  aU  information  on  the  state 
of  a  system  at  a  given  time  and  one  which  dynamically  evolves  the  state  of  the  system,  the  time-discrete 
V/L  process  structure  allows  the  analyst  to  determine  the  time-history  of  the  capability  states  of  a  system. 
Also,  by  discretizing  the  'V/L  process  window"  into  user-determined  time  steps,  the  new  process  structure 
allows  for  the  overlap  or  time-embedding  of  different  threat/target  system  interaction  processes  that  may 
be  greatly  disparate  in  time  scale.  This  last  feature  suggests  the  time-discrete  V/L  process  structure  as  an 
ideal  platform  for  an  integrated  V/L  analysis. 

Since  the  ultimate  products  of  a  V/L  process  structure  are  the  (possibly-degraded)  capability  states  of 
a  target  system,  the  process  architecture  must  be  formulated  in  a  reverse  order.  First,  all  mission-related 
capabilities  related  to  a  militaiy  system  must  be  determined.  Then,  the  components  and  subsystems 
(within  the  system)  that  are  critically  linked  to  the  operation  of  a  system-level  capability  must  be 
identified.  Finally,  all  physical  and  structural  information  describing  these  critical  components/subsystems 
and  how  they  fit  together  into  the  system  must  be  collated  into  a  target  description.  The  complete  target 
system  description  is  actually  a  combination  of  a  geometrical  description  and  an  operational  description 
(both  of  which  are  hierarchical).  The  geometrical  description  (typically  a  BRL-CAD  file)  is  contained 
within  [S(/^)],  while  the  operational  description  (the  operational  couplings  between  components  which, 
when  integrated  together,  result  in  a  specific  capability)  is  within  [F(r„)]  and  Op^^.  Both  geometrical 
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CHEMICAL  V/L  PROCESS 


irocess  "time-embedded"  within  a  chemical 


and  operational  descriptions  are  required  to  define  a  dynamic  system;  the  descriptions  must  be  confluent 
with  one  another. 

In  a  followup  technical  report,  the  concepts  introduced  in  sections  3.3  and  3.4  (and  included 
subsections)  will  be  further  explored,  including  an  in-depth  tradeoff  study  of  the  relative  applicability  of 
all  capability  tree/netwoik  methodologies  addressed  within  the  current  report. 
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